Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/427F70EA7F6C11F09DB47512C4F9AE02.roa
File:                     427F70EA7F6C11F09DB47512C4F9AE02.roa (raw, json)
Hash identifier:          Tspw1vqIc8DuBcahb5e6W08NxNK+AXR+sKeVt9MwvlY=
Subject key identifier:   2F:67:57:7C:4A:87:7C:7E:AA:52:77:89:E3:4D:86:77:24:72:92:36
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F37
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/427F70EA7F6C11F09DB47512C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:37:19 +0000
ROA not before:           Fri 02 Oct 2026 15:37:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63733
IP address blocks:        137.59.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28471 (0x6f37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:37:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfaf-085f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:5c:f6:ca:b9:dc:85:53:84:bf:5a:27:24:
                    ac:6f:b5:1f:3e:c1:26:fa:2d:15:81:f2:ab:e7:0e:
                    17:60:35:db:c9:c2:5c:a1:8e:36:2b:5c:31:bc:60:
                    3a:b1:4a:96:a9:73:1e:33:76:fc:8a:e5:bc:e6:62:
                    c8:1b:cd:27:27:7c:6e:27:2c:72:25:e0:35:75:86:
                    a2:0a:a8:66:d0:39:50:0a:67:c4:2c:d0:d2:e6:9f:
                    60:73:d0:11:47:eb:2f:c8:f8:c3:ab:01:ba:a2:e1:
                    5b:22:8e:61:41:e4:e9:b7:61:03:2f:95:79:cd:f5:
                    2b:b6:e7:cb:70:56:21:ff:df:a2:e5:a3:8e:e2:4d:
                    b7:cf:b2:a6:62:58:45:d2:d4:7c:ea:50:c6:63:e5:
                    6f:50:cf:d5:3d:3e:0c:69:b9:84:8c:d4:95:c9:aa:
                    9d:5e:57:f6:dd:35:af:ca:b5:60:61:2a:04:5a:55:
                    57:f5:a2:51:5a:60:88:74:d4:e3:63:45:32:54:60:
                    43:c4:e9:c1:c1:68:04:be:0e:0a:60:38:83:4d:67:
                    16:7e:3d:1b:a0:a4:50:3b:5c:a9:0e:01:ab:d4:49:
                    62:5a:26:cb:2d:79:f7:70:e5:47:6c:1f:2c:97:e7:
                    bb:f9:d5:e4:99:8a:1e:5e:1f:4f:4c:6d:db:d4:94:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:67:57:7C:4A:87:7C:7E:AA:52:77:89:E3:4D:86:77:24:72:92:36
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/427F70EA7F6C11F09DB47512C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:95:69:d5:d8:7f:d3:e9:d2:3f:07:64:3a:87:30:46:c9:37:
         4a:22:7d:11:62:62:03:37:bc:71:1a:94:15:ae:27:a1:50:8b:
         2c:cf:2e:97:1c:47:21:5d:46:c6:72:36:8f:aa:1b:80:ca:71:
         4a:66:7f:c9:b6:4b:69:45:c6:53:0d:cc:90:7f:bb:7e:91:41:
         f2:6e:ec:57:05:dd:65:38:d7:b9:41:ac:a9:8e:ce:03:d1:21:
         85:81:4c:fc:66:c9:1f:ce:2a:eb:d5:25:2b:ce:46:26:71:ed:
         f8:b0:c5:e9:d0:d6:21:f9:59:b3:1b:ab:85:c7:11:55:63:44:
         95:a3:fa:04:48:75:e8:72:f9:b0:b2:e1:29:4c:47:ec:a9:06:
         6b:3b:11:c1:25:31:17:be:b9:e5:c2:3a:52:07:80:be:31:31:
         21:dd:27:0a:f6:c4:f5:85:c0:62:86:cd:c2:98:b8:31:57:3a:
         7e:47:58:99:51:0d:b8:81:9b:c0:c6:a3:a2:e7:5b:2d:68:db:
         1a:18:e9:91:2a:13:fa:87:d6:89:b4:79:80:69:c9:9c:0a:f7:
         6d:e7:58:07:3b:ce:f9:14:79:53:a8:06:84:8e:9d:6e:8a:af:
         e4:4b:b5:70:68:8f:9a:80:55:3b:b4:26:7a:b3:09:de:d4:37:
         7b:6b:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:22:52 2026 by rpki-client